VULNERABILITY INTELLIGENCE
CVE-2026-8047
CVSS score7.5 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2026-05-26
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.
Weakness classification
- info@cert.vde.com: CWE-1284